The 12 Factor Apps via @ryanwaskiewicz
“12 factor apps help you spend less time managing deps across envs, and more time on your code.”
#EmpireJS
Heading to @EmpireJS tomorrow?
Want to talk security over coffee?
Look out for our co-founder @joepelletier wearing a black “Hailstone” t-shirt 👋
#empirejs
Heading to @EmpireJS this week? Here are four talks we're excited for!
#appsec #empirejs #nodejs #javascript
blog.hailstone.io/four-talks…
Hailstone retweeted
This #security best practice is unfortunately not (yet) on our #NodeJS best practices list (sad Smiley): Prevent Unsafe Redirects that look trustworthy to the user, yourdomain.com/login?redirec…
blog.hailstone.io/how-to-pre…
Hailstone retweeted
How to Prevent Unsafe HTTP Redirects in Node: blog.hailstone.io/how-to-pre…
Interested in seeing a demo of Hailstone? Sign up at Hailstone.io and we'll be in touch shortly!
Node.js Template Engines: Why Default Encoders Are Not Enough
#appsec #NodeJS
blog.hailstone.io/why-contex…
Awesome discussion on multiple Node.js security topics! Be sure to check out the video: youtu.be/q9xHD_PqNpQ
#nodejs #appsec
Hailstone retweeted
“How to Approach Security with Node.js” by @nodejs medium.com/@nodejs/how-to-ap…
Fasten your Helmet.js (Part 1): Why you need to secure your Express HTTP headers
blog.hailstone.io/fasten-you…
#nodejs #expressjs #helmetjs #appsec
Hailstone retweeted
Glad to see that browsers have become a major force in protecting against #XSS with headers like #csp. This wasnt the case even a few years ago. Projects like #helmetjs are invaluable to this cause #appsec #devsecops ow.ly/DDuc30j3yex
Hailstone is sponsoring @NodeSummit this week!
We are a new application security solution for #NodeJS that helps teams deploy secure code, faster.
Swing by and say hello!
#NodeSummit
How to prevent SQL Injection in Node.js
blog.hailstone.io/how-to-pre…
Hailstone retweeted
CVE-2018-3754 Node.js third-party module query-mysql versions 0.0.0, 0.0.1, and 0.0.2 are vulnerable to an SQL injection vulnerability due to lack of user input sanitization. This may allow an attacker to run arbitrary SQL queries ... bit.ly/2u4kBIv
Hailstone retweeted
Good overview of “Developing Secure Node.js Applications” by @InfoSecPhantom jsblog.insiderattack.net/dev… | #AppSec









